General

  • Target

    761fe3bfd29723d4a7b71f22c1191dc6_JaffaCakes118

  • Size

    113KB

  • Sample

    240726-244vja1aml

  • MD5

    761fe3bfd29723d4a7b71f22c1191dc6

  • SHA1

    dd3cf53d6054f31f9247137893acf9979ac8c9c2

  • SHA256

    229cbfd1358e41fe196d8ebb933d47df59ca25f95b3a063340b1e651adb250d6

  • SHA512

    47d74ad81589af992e846cfa82e9e56985554e7639a15896bdfd1d274d9025d913d97a6fae1a590b42ad7214aec3bf87efe1465517ce7fc968fb674128b0fb2d

  • SSDEEP

    1536:eb3j2BCVNWiJxDQHqSaiD02g9usGA9bAFV2zoEXiLDU6pdjul+5:03j2BCV9LSTIvusN9bAeiLDU6pdWi

Malware Config

Targets

    • Target

      761fe3bfd29723d4a7b71f22c1191dc6_JaffaCakes118

    • Size

      113KB

    • MD5

      761fe3bfd29723d4a7b71f22c1191dc6

    • SHA1

      dd3cf53d6054f31f9247137893acf9979ac8c9c2

    • SHA256

      229cbfd1358e41fe196d8ebb933d47df59ca25f95b3a063340b1e651adb250d6

    • SHA512

      47d74ad81589af992e846cfa82e9e56985554e7639a15896bdfd1d274d9025d913d97a6fae1a590b42ad7214aec3bf87efe1465517ce7fc968fb674128b0fb2d

    • SSDEEP

      1536:eb3j2BCVNWiJxDQHqSaiD02g9usGA9bAFV2zoEXiLDU6pdjul+5:03j2BCV9LSTIvusN9bAeiLDU6pdWi

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks